1. Introduction
This Privacy Policy describes how [[COMPANY]], operator of the Magnus brand ("Magnus", "we", "us", "our"), collects, uses, stores, and protects personal information through the Magnus Fitness mobile app ("the App").
The App lets you browse Magnus home-gym equipment, follow guided training programs, and keep a training journal. You can browse the equipment catalog and articles without an account. An account is required for your profile, owned equipment, training journal, and guided programs.
By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.
2. Information We Collect
2.1 Account Information
- Name and email address, provided when you create an account
- Password, if you sign up with email. It is stored only in hashed form (bcrypt), and we cannot view it.
- Sign in with Google / Sign in with Apple: if you use these, we receive a unique account identifier from Google or Apple, plus your name and email address when the provider shares them. If you choose Apple's "Hide My Email", we receive an Apple relay address instead of your real email.
2.2 Fitness and Training Information You Provide
- Owned equipment: the Magnus machines you mark as owned, used to filter exercises
- Training journal: programs and days you start, exercises you choose, and the sets, repetitions, and weights you log, with the date and time each was completed
- Program progress and history: which training days and weeks you have completed
This is information you enter yourself. The App does not read data from Apple Health, Google Health Connect, wearables, or your device's sensors.
2.3 Subscription and Purchase Information
- Store purchase records: when you subscribe to Magnus PRO, the App sends the purchase receipt or token issued by the Apple App Store or Google Play to our server. We verify it with Apple or Google and record the plan, transaction identifier, and expiry date.
- Access codes: codes you redeem, and the access period they grant
Payments are processed entirely by Apple or Google. We never receive or store your card number or other payment credentials.
2.4 Information Collected Automatically
- Authentication tokens: session tokens (JWT) that keep you signed in. They are stored in the App's private storage on your device. On our server we store only a hashed copy of the refresh token.
- Server logs: like most online services, our server records basic technical request information (such as IP address, time, and requested address) to operate and secure the service.
2.5 Information Stored Only on Your Device
To start quickly and work with a weak connection, the App keeps a copy of the catalog, your profile, and your training journal in its private storage on your device. When you sign out, the copies of your profile and training journal are cleared from the device. Your data stays saved in your account and returns when you sign in again.
2.6 Information We Do NOT Collect
- Precise or approximate location
- Contacts, photos, camera, microphone, or files
- Health or body measurements from Apple Health, Google Health Connect, or wearables
- Advertising identifiers. The App contains no advertising.
- Analytics or behavioural tracking. The App contains no third-party analytics or tracking SDKs.
- Payment card or bank details
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Create your account, sign you in, and keep your session secure | Name, email, password (hashed), Google/Apple identifier, authentication tokens |
| Show exercises that match your equipment | Owned equipment |
| Save your training journal and progress, and sync it across your devices | Training journal, program progress and history |
| Unlock Magnus PRO content and verify subscriptions | Store purchase records, access codes |
| Respond to your support and privacy requests | Name, email, and the details you send us |
| Operate, secure, and troubleshoot the service | Server logs |
We do not use your information for advertising, sell it, build marketing profiles from it, or use it for automated decisions that affect you.
4. Data Sharing and Disclosure
4.1 Service Providers
We share only the minimum information needed with the following providers:
| Service | Provider | Purpose | Data Involved |
|---|---|---|---|
| Sign in with Google | Google LLC | Optional sign-in | Sign-in token that Google issues to the App and we verify |
| Sign in with Apple | Apple Inc. | Optional sign-in | Sign-in token that Apple issues to the App and we verify |
| App Store In-App Purchase | Apple Inc. | Subscription billing and verification | Purchase receipt / transaction identifiers |
| Google Play Billing | Google LLC | Subscription billing and verification | Purchase token / order identifiers |
| Server hosting | Our hosting provider | Running the App's server and database | All data described in Section 2, stored on our behalf |
4.2 External Links
"Buy Now" buttons and some articles or banners open websites outside the App, such as the official Magnus store. The "Chat with us on WhatsApp" button opens WhatsApp with a pre-written message. Nothing is sent until you choose to send it, and conversations on WhatsApp are subject to WhatsApp's own terms and privacy policy. These external services have their own terms and privacy policies, which apply to anything you do there.
4.3 No Sale of Data
We do not sell, rent, or trade your personal information, and we do not share it with third parties for their own marketing.
4.4 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or an enforceable request from a government authority.
5. Data Storage and Security
- Encryption in transit: all communication between the App and our servers uses HTTPS/TLS.
- Password hashing: passwords are hashed with bcrypt and never stored in plain text.
- Token-based sessions: access tokens are short-lived. Refresh tokens expire after 7 days and are revoked when you log out.
- Access control: your journal, equipment, and subscription data can only be read by your own signed-in account. Administrative access to our systems is limited to authorized Magnus staff.
In the event of a data breach affecting your personal information, we will notify affected users and the relevant authorities as required by applicable law.
6. Data Retention
- Account, equipment, and training journal: kept for as long as your account exists, and deleted when your account is deleted.
- Subscription and code records: kept while your account exists and deleted with it. Redeemed access codes stay marked as used, without any link to you. Apple and Google keep their own purchase records under their own policies.
- Session tokens: expire automatically and are revoked when you log out.
- Server logs: kept for a limited period for security and troubleshooting, then deleted.
7. Your Rights and Choices
- Access: you can see your profile, equipment, and training history in the App at any time.
- Correction: update your owned equipment in the App, or contact us to correct your account details.
- Deletion: you can delete your account and its data at any time in the App (Profile → Delete account), or by request. See Delete your account.
- Withdraw consent: you may stop using the App at any time. Remember to cancel any subscription in your Apple or Google account settings, since deleting the App does not cancel it.
These rights are provided in line with applicable law, including Indonesia's Personal Data Protection Law (Law No. 27 of 2022). To exercise them, contact us using the details in Section 11.
8. Children's Privacy
The App is intended for adults training with home-gym equipment. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has created an account, please contact us and we will delete it.
9. International Data Transfers
The App is operated from Indonesia. If you use it from outside Indonesia, your information may be transferred to and processed in Indonesia or wherever our service providers operate, under the safeguards described in this policy.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the dates at the top of this page. For significant changes, we will also let you know in the App. Continued use of the App after an update means you accept the revised policy.
11. Contact Us
For questions or requests about this Privacy Policy or your data, contact us:
- Company: [[COMPANY]]
- Email: [[PRIVACY_EMAIL]]
- Support: Magnus Fitness Support